INS'HACK 2017 - Forensics 225 Lost File

Lost File

Forensics - 225 Points

Heeelp! I did a rm on my python file. All my work is gone! Would you help me restore it?
I usually work with a virtualenv if this info can help you.. ssh lost-file@lost-file.ctf.insecurity-insa.fr (password lost-file)

You can now use several payloads.
If you want to extract the source, you’ll need meliae, a python memory analysis tool. On the challenge box I had problems while executing pyrasite/bin/pip install meliae so I resorted to manually downloading and compiling the source: